Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] New RFID Mailing List Owner 0day |
|---|---|
| Date: | Sat, 29 Sep 2007 20:01:39 +0200 |
Your script assumes a few things that are not part of a default Slackware install. # This script was created for use on Slackware!
exit 5
What is the purpose of the exit status code of 5? Yes, any non-zero number indicates an error. Common exit codes are 0 (succeeded), 1 (or any non-zero number, failure), 126 (command found but not executable), 127 (command not found), and 128+N (fatal error where N is the SIGNAL that caused the exit). An exit status of 5 works, just curious as to its purpose.
chown root.staff ping
"staff" is not a default group in Slackware. Your script assumes that it has already been created.
chmod 500 ttysnoop
"ttysnoop" is not installed by Slackware.
chmod 600 inetd.conf
It would also be a good idea to remove the execute permissions from /etc/rc.d/rc.inetd and any other service in /etc/rc.d that isn't needed. Restricting the read permissions of the contents of that directory is also a good idea.
cp /root/slack/syslog.conf /etc
The file, "/root/slack/syslog.conf" does not exist by default in Slackware.
# Tighten up the log file perms now cd /var/log chmod 600 syslog log.auth log.cron log.daemon log.kern log.mail log.mark log.syslog chmod 600 log.user messages ftp.log secure.log chown root.wheel syslog log.auth log.cron log.daemon log.kern log.mail log.mark log.syslog chown root.wheel log.user messages ftp.log secure.log
Most of these files do not exist by default. I'll assume that they are the product of your custom syslog.conf.
echo "MAKE SURE YOU ADD USERS THAT YOU WANT TO BE ABLE TO SU TO ROOT" echo "TO THE ROOT AND WHEEL GROUPS OR THEY WON'T BE ABLE TO!!!!!!."
There is nothing in a default Slackware install that will restrict the use of the "su" command. Slackware does not use PAM. The "/etc/suauth" file does not exist by default. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [Full-disclosure] gadi evron, T Biehn |
|---|---|
| Next by Date: | Re: [Full-disclosure] gadi evron, gjgowey |
| Previous by Thread: | Re: [Full-disclosure] New RFID Mailing List Owner 0day, nocfed |
| Next by Thread: | [Full-disclosure] Firefox 2.0.0.7 has a very serious calculation bug, carl hardwick |
| Indexes: | [Date] [Thread] [Top] [All Lists] |